CVE-2011-3557

NameCVE-2011-3557
DescriptionUnspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7, 6 Update 27 and earlier, 5.0 Update 31 and earlier, 1.4.2_33 and earlier, and JRockit R28.1.4 and earlier allows remote attackers to affect confidentiality, integrity, and availability, related to RMI.
SourceCVE (at NVD; CERT, LWN, oss-sec, fulldisc, bugtraq, EDB, Metasploit, Red Hat, Ubuntu, Gentoo, SuSE, Mageia, GitHub code/issues, web search, more)
ReferencesDSA-2356-1, DSA-2358-1
NVD severitymedium (attack range: remote)
Debian Bugs645881

Vulnerable and fixed packages

The table below lists information on source packages.

Source PackageReleaseVersionStatus
openjdk-6 (PTS)wheezy (security), wheezy6b38-1.13.10-1~deb7u1fixed
openjdk-7 (PTS)wheezy7u95-2.6.4-1~deb7u1fixed
wheezy (security)7u111-2.6.7-1~deb7u1fixed
jessie (security), jessie7u111-2.6.7-1~deb8u1fixed

The information below is based on the following data on fixed versions.

PackageTypeReleaseFixed VersionUrgencyOriginDebian Bugs
openjdk-6source(unstable)6b23~pre11-1medium
openjdk-6sourcelenny6b18-1.8.10-0~lenny2mediumDSA-2358-1
openjdk-6sourcesqueeze6b18-1.8.10-0+squeeze2mediumDSA-2356-1
openjdk-7source(unstable)7~b147-2.0-1medium
sun-java6source(unstable)(unfixed)medium645881

Notes

[lenny] - sun-java6 <no-dsa> (Non-free not supported)
[squeeze] - sun-java6 <no-dsa> (Non-free not supported)

Search for package or bug name: Reporting problems